CVE-2018-21078 : Security Advisory and Response

Samsung mobile devices with M(6.0), N(7.x), and O(8.0) software are vulnerable to a security issue in the Contacts application that allows attackers to make video calls by exploiting SS and USSD codes.

Understanding CVE-2018-21078

Samsung mobile devices with specific software versions are affected by a security vulnerability that compromises the security of SS and USSD codes in the Contacts application.

What is CVE-2018-21078?

An issue identified in Samsung mobile devices running M(6.0), N(7.x), and O(8.0) software allows attackers to initiate video calls due to inadequate security measures for SS and USSD codes in the Contacts application.

The Impact of CVE-2018-21078

This vulnerability could be exploited by malicious actors to make unauthorized video calls on the affected Samsung devices, potentially compromising user privacy and security.

Technical Details of CVE-2018-21078

Samsung mobile devices with specific software versions are susceptible to this security flaw in the Contacts application.

Vulnerability Description

The Contacts application on Samsung devices lacks proper security measures for SS and USSD codes, enabling attackers to make video calls without authorization.

Affected Systems and Versions

Samsung mobile devices with M(6.0), N(7.x), and O(8.0) software

Exploitation Mechanism

Attackers can exploit the inadequate security of SS and USSD codes in the Contacts application to initiate video calls without user consent.

Mitigation and Prevention

Users and organizations can take immediate and long-term steps to mitigate the risks associated with CVE-2018-21078.

Immediate Steps to Take

Regularly update Samsung devices to the latest software version provided by the manufacturer.
Avoid clicking on suspicious links or downloading unknown applications that may exploit this vulnerability.

Long-Term Security Practices

Implement strong security measures on mobile devices, such as using PIN or biometric authentication.
Educate users about the importance of mobile security and safe browsing practices.

Patching and Updates

Stay informed about security updates and patches released by Samsung to address this vulnerability.